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Before installing Norton AntiVirus, take a moment to 
review the system requirements. 


If you have difficulties installing Norton AntiVirus, see 
“If your product won’t install” on page 38. 


System requirements 


To use Norton AntiVirus, your computer must have one 
of the following Windows operating systems: 
= Windows 98/Me 
= Windows 2000 
= ~Windows XP 
Home or Professional Editions 


Installation of Norton AntiVirus is not supported on NEC 
PC98, Windows 95/NT 4.x, Macintosh, Linux, or server 
versions of Windows 2000/2003/XP computers. 


If you are planning to upgrade your Windows operating 
system from Windows 98/Me to Windows 2000/XP, you 
must uninstall Norton AntiVirus first and then reinstall 
after the upgrade is complete. 
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Installation 


System requirements 


Your computer must also meet the following minimum 
requirements. 


Windows 98 


133-MHz processor 
64. MB of RAM 


90 MB of available hard disk 
space 


CD-ROM or DVD-ROM drive 
VGA video 
Internet Explorer 5.5 or later 


Windows Me 150-MHz processor 
64. MB of RAM 


90 MB of available hard disk 
space 


CD-ROM or DVD-ROM drive 
VGA video 
Internet Explorer 5.5 or later 


Windows 2000 
Professional 


133-MHz or higher processor 


= 64 MB of RAM 
Edition : , 

= 125 MB of available hard disk 

space 

= CD-ROM or DVD-ROM drive 

= Internet Explorer 5.5 or later 
Windows XP = = 300-MHz or higher processor 
Editions 


128 MB of RAM 


125 MB of available hard disk 
space 


CD-ROM or DVD-ROM drive 
Internet Explorer 6.0 


If you are installing on Windows 2000/XP, you must 
install with administrator privileges. 
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Supported email clients 


Email scanning is supported for any POP3-compatible 

and SMTP-compatible email client including: 

= Microsoft Outlook Express version 4, 5, 6 

= Microsoft Outlook 97/98/2000/XP/2003 

= Netscape Messenger version 4, Netscape Mail version 
4,6,7 

= Eudora Light version 3, Eudora Pro version 4, Eudora 
5, Eudora 6.0, Eudora 6.0J 

= Pegasus 3 

= IncrediMail XE 

= Becky! Internet Mail 1.x, 2.0 

= AL-Mail32 1.11 

= Datula 1.x 

t= =PostPet 2.1, 2.06, 3.0 


Unsupported email programs 


Norton AntiVirus does not support the following email 
clients: 


= IMAP 

= AOL 

= POP3s with Secure Sockets Layer (SSL) 

= Web-based email such as Hotmail and Yahoo! Mail 
= Lotus Notes 


About encrypted email connections 


Norton AntiVirus does not support email connections 
that use Secure Sockets Layer (SSL). SSL is a Netscape 
protocol that is designed to provide secure 
communications on the Internet. If you use an SSL 
connection, you are not protected by Norton AntiVirus. 


To send email messages through SSL connections, turn 
off incoming and outgoing email protection in Norton 
AntiVirus. 
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To send email messages through an SSL connection 


1 


& 


aw fF WN 


In the main window, click Options. 
fa menu appears, click Norton AntiVirus. 


If you set a password for Options, Norton AntiVirus 
asks you for the password before you can continue. 
In the Options window, click Email. 

Click OK. 

Uncheck Scan incoming Email (recommended). 
Uncheck Scan outgoing Email (recommended). 


Resend your email message. 


Supported instant messenger programs 


The following instant messenger programs are 
supported: 


AOL Instant Messenger, version 4.7 or later 
Yahoo! Messenger, version 5.0 or later 
Windows Messenger, versions 4.7 or later 


MSN Instant Messenger, versions 4.6, 4.7, 6.0 or 
later. Version 5.0 is not supported. 


Before installation 


See “Create Before you install Norton AntiVirus, you must prepare 
Emergency Disks" your computer. If your computer cannot start from a CD, 
on page 39. 


create Emergency Disks. 


Prepare your computer 


If you have an earlier version of Norton AntiVirus, the 
new version automatically removes the earlier version. If 
your version is earlier than 2003, you must uninstall it 
before installing the new version. 


If you have Norton AntiVirus 2004, Norton AntiVirus 
2004 Professional, Norton AntiVirus 2003, or Norton 
AntiVirus 2003 Professional, you can transfer your 
existing option settings to the new version of the product. 


Installation 
Install Norton AntiVirus 


Before you install Norton AntiVirus, do the following: 


If you have any other antivirus programs on your 
computer, you must uninstall them and restart your 
computer before installing Norton AntiVirus. 

To uninstall other antivirus programs, see the user 
documentation that came with each program. 

Close all other Windows programs before installing 
Norton AntiVirus, including those programs that are 
displayed in the Windows system tray. 


Install Norton AntiVirus 


You can install Norton AntiVirus from the CD or from the 
file that you downloaded. 


To install Norton AntiVirus 


See “Iftheopening 1 
screen does not 
appear" on 

page 10. 


Do one of the following: 

= If you are installing from a CD, insert the CD into 
the CD-ROM drive. 

«| If you downloaded your copy of Norton AntiVirus, 
double-click the file that you downloaded, and then 
click Install. 


In the Norton AntiVirus 2005 Setup window, click 
Next to begin the installation. 


Read the License Agreement, and then click I accept 
the License Agreement. 

If you decline, you cannot continue with the 
installation. 


If prompted, type the product key. 
Click Next. 


In the Pre-Install Scanner window, click Start Scan to 
scan your computer before installing Norton 
AntiVirus. If an infection is detected in an active 
program, Norton AntiVirus may shut it down. Save all 
your data before you begin. 
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11 


See “After 12 
installation” on 


age 11. 
pag B 


Do one of the following: 

= If you want to end the scan, click Stop Scan. 

= Ifa virus is detected, for each file that you want to 
delete, click Delete. 

If you want to see the results of the scan, click View 

Details, and then OK to exit. 


Click Next. 


Select a folder into which you want to install Norton 
AntiVirus. 

If you are running Windows 98/98/Me, ensure the 
folder’s drive has 90 MB of available hard disk space. 
If you are installing on Windows 2000/XP, ensure you 
have 125 MB of available hard disk space. 

Click Next. 

The Installation Progress window tracks the progress 
of the install, and displays the components that are 
necessary to run Norton AntiVirus. 


Click Restart Windows Now (recommended) to 
complete the installation. 


Click Finish. 


If the opening screen does not appear 


Sometimes a computer’s CD-ROM drive does not 
automatically run a CD. 


To start the installation from the CD 


1 
2 


On your desktop, double-click My Computer. 


In the My Computer window, double-click the icon for 
your CD-ROM drive. 


In the list of files, double-click Cdstart.exe. 
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After installation 


Should Norton AntiVirus prompt you to restart your 
computer, do so, and when Windows loads, the 
Configuration Wizard will appear. Otherwise, the 
Configuration Wizard appears after you install Norton 
AntiVirus. 


Use the Configuration Wizard 


The Configuration Wizard lets you activate and register 
Norton AntiVirus, launches LiveUpdate and a full system 
scan, and then schedules a weekly scan of your 
computer. You must be online to activate your product. 


O) If you choose not to register the software using the 
Configuration Wizard, or if registration fails for some 
reason, you can register by using the Product 
Registration option on the Help & Support menu in 
Norton AntiVirus or by visiting the Symantec Web site at 
www.symantec.com. 


To use the Configuration Wizard 

1 Inthe opening Configuration Wizard’s window, click 
Next. 

2 Inthe Product Activation window, click Activate and 
register your product now (recommended). 
Click Next. 


4 Inthe first Registration window, in the drop-down list, 
select the Country/Region from which you are 
registering. 

5 If you would like information from Symantec about 
Norton AntiVirus, check the method by which you 
want to receive that information, type your email 
address, phone number, and then click Next. 


6 Check the box if you want to receive postal mail from 
Symantec. 
Type your name and address, and then click Next. 


8 In the Activation window, verify that you are 
connected to the Internet, and then click Next. 
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In the Activation Complete window, click Print key 
to print a copy of the product key for your records, 
then click Next. 


Review the subscription information, and then click 
Next. 


If the Security window appears, Symantec 
recommends that you leave the default option 
checked and continue using Norton AntiVirus to 
protect your computer. 

Click Next. 


Norton AntiVirus automatically performs the 
following post-installation tasks: 


Run LiveUpdate Ensures that you have the latest 


virus protection. 


Scan for Viruses Performs a full system scan. 


Schedule weekly Schedules a weekly scan of your 
scans of local hard | local hard drives. You must have 
drives Microsoft Scheduler installed to 


use this option. 
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Click Finish to launch the tasks. 


Read the Readme file 


The Readme file contains technical tips and information 
about product changes that occurred after this guide was 
printed. It is installed on your hard disk in the same 
location as the Norton AntiVirus product files. 


To read the Readme file 


1 


2 


On the Windows taskbar, click Start > Programs > 
Norton AntiVirus 2005. 


Click Readme. 
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For more information 


The product documentation provides assistance for using 
Norton AntiVirus. You can find the information that you 
need on your computer and on the Web. 


Use online Help 


Help is available throughout your Symantec product. 
Help buttons and links to more information provide 
assistance that is specific to the task that you are 
completing. The Help menu provides a comprehensive 
guide to all of the product features and tasks that you can 
complete. 


To use online Help 

1 At the top of the main window, click Help & Support 
> Norton AntiVirus Help. 

2 Inthe Help window, in the left pane, select a tab. Your 
options are: 


Contents Displays the Help by topic 

Index Lists Help topics in alphabetical order 
by key word 

Search Opens a search box in which you can 


type a word or phrase 


You can also print any topic in Help. 


To print a topic in Help 
1 Inthe Help window, click the Contents tab. 


2 Inthe Contents list, select the topic that you want to 
print, and then click Print. 

3 Select whether you want to print only the selected 
topic or the topic and all of the subtopics under it. 


4 Click OK. 
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Window and dialog box Help 


Window and dialog box Help provides information about 
the program. This type of Help is context-sensitive, 
meaning that it provides help for the dialog box or 
window that you are currently using. 


To access window or dialog box Help 


¢ Do one of the following: 
= In the window, click any Help link. 
= In the dialog box, select Help or More Info. 


Access the User's Guide PDF 


The Norton AntiVirus User’s Guide is provided on the CD 
in PDF format. You must have Adobe Reader installed on 
your computer to read the PDF. 


If you purchased this product as an electronic download, 
Adobe Reader was not included. You must download it 
from the Adobe Web site. 

To install Adobe Reader from the CD 

Insert the CD into the CD-ROM drive. 

Click Browse. 

In the CD window, double-click the Manual folder. 

If applicable, double-click the Adobe folder. 
Double-click the program file. 


Au FWRN = 


Follow the on-screen instructions to select a folder for 
Adobe Reader and complete the installation. 


Once you have installed Adobe Reader, you can read the 
PDF from the CD. 

To read the User's Guide PDF from the CD 

1 Insert the CD into the CD-ROM drive. 

2 Click Browse. 

3 Double-click the Manual folder. 

4 Double-click the PDF. 


You can also copy a User’s Guide to your hard disk and 
read it from there. 


Installation | 15 
For more information 


To read a User's Guide from your hard disk 
1 Open the location into which you copied the PDF. 
2 Double-click the PDF. 


Symantec products on the Web 


The Symantec Web site provides extensive information 
about all Symantec products. There are several ways to 
access the Symantec Web site. 

To access the Web site from the Help menu 


¢ Select the solution that you want. Your options are: 


Help and Support 


Symantec Security 
Response 


More Symantec 
solutions 


Takes you to the product support 
page of the Symantec Web site, 
from which you can access the 
knowledge bases and downloads 
for your product. 


Takes you to the Security Response 
page of the Symantec Web site, 
from which you can update your 
protection and read the latest 
information about antithreat 
technology. 


Takes you to the Symantec Store 
Web site, from which you can get 
product information on every 
Symantec product. 


Within your Symantec product, the Reports page 
contains a link to the Symantec online Virus 
Encyclopedia, as does the Windows Explorer toolbar. 


To access the Web site from the Reports page 
1 Inthe main window, under Norton AntiVirus, click 


Reports. 


2 On the Reports page, click View Online Virus 


Encyclopedia. 
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To access the Symantec Web site from Windows 

Explorer 

1 Open Windows Explorer. 

2 On the toolbar, on the Norton AntiVirus menu, click 
View Virus Encyclopedia. 
This option connects you to the Symantec Security 
Response Web page, from which you can search for 
information on all types of viruses. 


To access the Symantec Web site in your browser 


+ On the Internet, go to www.symantec.com 


See “Use online 
Help" on page 13. 


Use the information in this section to familiarize yourself 
with the product. 

This section includes the following information: 

= A list of all of the features in the product 

= A brief description of each feature 


The feature summary can help you determine which 
feature to use to solve a problem. Read the feature 
descriptions to locate the correct component to use. 


For more information on any of the features listed, see 
the online Help. 
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Virus and threat protection features 


Norton AntiVirus provides comprehensive virus 
prevention, threat detection, and repair software for your 
computer. It automatically detects and repairs known 
viruses. Norton AntiVirus detects viruses and other 
potential risks in instant messenger attachments as well 
as in email messages, Internet downloads, and other 
files. Easy updating of the virus definitions over the 
Internet keeps Norton AntiVirus prepared for the latest 
threats. 


Norton AntiVirus includes expanded threat detection of 
both known and emerging threats, such as spyware and 
other files that could put your computer at risk. Norton 
AntiVirus also scans files inside of compressed files. 


Norton AntiVirus continually monitors your computer 
and protects it from known and unknown threats using 
the following features: 


Auto-Protect = Loads into memory when 
Windows starts, providing 
constant protection while you 
work. 


= Checks for viruses every time 
that you use software programs 
on your computer, insert floppy 
disks or other removable 
media, access the Internet, or 
use document files that you 
receive or create. 


Monitors your computer for any 
unusual symptoms that may 
indicate an active threat. 


Automatic Updates your program and virus 
LiveUpdate definitions automatically. 
Compressed file Detects and repairs viruses inside 


protection of compressed files. 
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Email protection Protects incoming and outgoing 
email messages, preventing your 
computer and other computers 
from infection. 


Instant messenger | Scans for and detects viruses in 


protection instant messenger attachments. 
Bloodhound Detects new and unknown viruses 
technology by analyzing an executable file's 


structure, behavior, and other 
attributes such as programming 
logic, computer instructions, and 
any data that is contained in the 


file. 
Password Protects Norton AntiVirus options 
protection from unauthorized changes. 


Norton QuickScan | Automatically runs once 
LiveUpdate updates your computer 
with program updates and virus 
definitions. Checks for infections 
that have processes running in 
memory and infections that are 
referenced by start-up folders and 
files. 
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Norton Internet Worm Protection 
features 


Internet Worm Protection prevents certain network 
worms and other Internet threats from attacking your 
computer. A worm is similar to a virus, but is a self- 
contained program that can replicate itself over a 
computer network. Internet Worm Protection can detect 
a worm on the network before it copies itself onto your 
computer. 


Internet Worm Protection uses the following methods to 
detect and handle network worms and Internet attacks: 


Port blocking Monitors the behavior of outgoing 
network traffic to establish 
whether an incoming connection is 


suspicious. 

Trojan horse Detects if a connection is being 

detection attempted on a port that is 
commonly used by Trojan horse 
applications. 

Auto blocking Blocks repeated Internet attacks. 


When Internet Worm Protection 
detects an attack, it automatically 
blocks any further communication 
from the attacker's IP address for 
30 minutes. 


General rules Uses a set of rules to monitor and 
handle all traffic and applications 
on the network. If the default 
protection is not appropriate, you 
can add, modify, or remove rules 
in the rules wizard. 


Traffic analysis Monitors and detects network 
traffic for malicious activity. It can 
block the traffic, log the event, and 
issue an alert. 
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Norton Internet Worm Protection features 


Exploit detection 


Threat level 


Prevents another computer from 
exploiting bugs in your computer's 
software. Worms use these bugs to 
transfer infected files onto your 
computer. 


Scans an application for known 
viruses, and determines whether a 
program is malicious. 
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This section contains information about starting your 
Symantec product and the features that are available in 
the main window. 


It is not usually necessary to open your Symantec 
product to benefit from the protection features that it 
provides. Automatic features that are set during 
installation provide you with basic protection. 


Open your Symantec product to view status information, 
customize option settings, perform basic tasks, and 
temporarily disable automatic features. 
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Start Norton AntiVirus 


All of the program features can be accessed from the 
main window. In addition, some features can be accessed 
from the Windows Explorer toolbar, Windows system 
tray, or Windows shortcut menu. 


Norton AntiVirus protects any computer on which it is 
installed. You do not have to start the program to be 
protected. 


To start Norton AntiVirus 


% 
oo 


Do one of the following: 


On the Windows taskbar, click Start > Programs 
> Norton AntiVirus > Norton AntiVirus 2005. 
On the Windows XP taskbar, click Start > All 
Programs > Norton AntiVirus > Norton 
AntiVirus 2005. 

On the Windows desktop, double-click the Norton 
AntiVirus icon. 

In the Windows system tray, double-click the 
Norton AntiVirus icon. 

In Windows XP, the system tray is called the 
notification area. 
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About the main window 


The main window lets you access program components, 
set options, and access online Help. 


® Norton AntiVirus 


Norton Antivirus System Status: OK 
Status 


Security Scanning Features 


Scan for Viruses a 


Auto-Protect | Internet Worm 


Reports Protection 


|@ _intemet worm Protection 


Blocks Internet 
@ Email scanning worm attacks at the 


- | point of entry. 
@ Full system scan 


Subscription Service 


More info 


Virus Definitions 


Renewal Date 


Automatic LiveUpdate On 


‘AntiVirus 


To explore the main window 


1 On the left side of the main window, select the option 
that you want. Your options are: 


Status View the system status of your Norton 
AntiVirus installation, your Security 
Scanning Features, and Norton 
AntiVirus Subscription settings. 


Scan for Viruses | Select where Norton AntiVirus scans 
for viruses on your computer. 


Reports View Quarantined items, an Online 
Virus Encyclopedia, and an Activity 
Log. 
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2 At the top of the main window, select the option that 
you want. Your options are: 


LiveUpdate Start LiveUpdate to update virus 
definitions and Norton AntiVirus. 


Options Customize the general features of 
Norton AntiVirus. 


Help & Support | Access Help for Norton AntiVirus. 


Start Norton AntiVirus from the Windows Explorer 
toolbar 


Norton AntiVirus adds a button and a menu to the 
Windows Explorer toolbar. 


To start Norton AntiVirus from the Windows Explorer 
toolbar 


¢ On the Windows Explorer toolbar, click the Norton 
AntiVirus icon. 


When you first open Windows Explorer after installing 
Norton AntiVirus, you may not see the Norton AntiVirus 
button and menu. You might have to restart Windows 
before the toolbar button appears. 


O) You may not be able to access the Norton AntiVirus 
Windows Explorer menu, depending on your computer’s 
configuration. 


To display the Norton AntiVirus button and menu 

1 In Windows Explorer, on the View menu, click 
Toolbars > Norton AntiVirus. 

2 Click the arrow to the right of the button to view your 
options. 
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Use the Windows shortcut menu 


You can access Norton AntiVirus from the Windows 
shortcut menu. 


To use the Windows shortcut menu 


¢ Right-click a disk, folder, or file icon, and then select 
an available option. 


Start Norton AntiVirus from the DOS command 
line 
If you are working in a DOS window (for example, writing 


a script or code), you can start Norton AntiVirus while 
still in DOS. 


To start Norton AntiVirus from the DOS command line 


1 Inthe DOS window, at the prompt, type CD 
C:\Program Files\Norton AntiVirus\ or the 
directory where Norton AntiVirus is located. 


2 Press Enter. 
3 At the prompt, type NAVW32 
4 Press Enter. 
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Activate your product 


Product activation reduces software piracy and ensures 
that you have received genuine Symantec software. 


If you did not activate your product when first prompted, 
you will receive an Activation Needed alert every day 
until you activate the product. 


O) You must activate your product within the time period 
specified by the alert or the product will stop working. 


You can activate your product from the Activation 
Needed alert or from the Activation option on the Help 
menu. Activation should take just a few minutes. 


To activate your product from the Activation Needed 
alert 


1 Inthe alert, click Activate Now. 

2 Click OK. 

3 On the Activation screen, click Next. 

4 On the Activation Successful screen, click Finish. 


To activate your product from the Help menu 

1 At the top of the main window, click Help and 
Support > Activation. 

2 On the Activation screen, click Next. 

3 On the Activation Successful screen, click Finish. 


If you have problems activating 


If you cannot connect to the Symantec servers to activate 
your product, first check to see if you have parental 
control software or an ISP that might be blocking the 
connection. If that doesn’t resolve the issue, you can 
activate by phone. 
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Check for connectivity blocking 


A connectivity problem can occur if you are using 
parental control software or are using an ISP that 
provides parental controls. If you suspect that parental 
controls are blocking the connection, configure the 
parental controls so that they do not block the activation 
procedure. You will need to log in to your parental control 
software as an administrator, or log in to the Internet 
through your ISP as an administrator, to change your 
configuration. 


Activate by phone 


If parental controls are not the problem, or if you cannot 
reconfigure your parental controls to resolve the issue, 
you can activate by phone. 


To activate by phone 
1 Disconnect from the Internet. 
2 Attempt activation again. 


3 After the connection fails (which could take a minute 
or two), select Activate my software by phone, then 
click Next. 


4 Follow the prompts provided. 
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Turn off Auto-Protect temporarily 


If you have not changed the default option settings, Auto- 
Protect loads when you start your computer to guard 
against viruses, Trojan horses, worms, and other 
malicious threats. It checks programs for viruses as they 
are run and monitors your computer and removable 
media for any activity that might indicate the presence of 
a virus. When a virus or virus-like activity is detected, 
Auto-Protect alerts you. 


In some cases, Auto-Protect may warn you about a virus- 
like activity that you know is not the work of a virus. If 
you will be performing such an activity and want to avoid 
the warning, you can turn off Auto-Protect. 


If you have set a password for Options, Norton AntiVirus 
asks you for the password before you can view or change 
the settings. 


To turn off Auto-Protect 


1 Inthe main window, click Options. 
fa menu appears, click Norton AntiVirus. 


2 Inthe Options window, under System, click Auto- 
Protect. 


3 In the Auto-Protect pane, uncheck Enable Auto- 
Protect. 


4 Inthe Options popup window, select the period 
during which you want Auto-Protect turned off. 
To turn on Auto-Protect 


1 Inthe main window, click Options. 
If a menu appears, click Norton AntiVirus. 


2 Inthe Options window, under System, click Auto- 
Protect. 

3 In the Auto-Protect pane, check Enable Auto- 
Protect. 


If the Norton AntiVirus icon is visible in the Windows 
system tray, you can use it to turn on and turn off Auto- 
Protect. 
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To turn on or turn off Auto-Protect using the Norton 
Antivirus icon in the Windows system tray 
+ In the Windows system tray, right-click the Norton 
AntiVirus icon, and then do one of the following: 
=! Check Enable Auto-Protect to turn on Auto- 
Protect. 
«= Uncheck Enable Auto-Protect to turn off Auto- 
Protect. 
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If you have an emergency, read these sections to try to 
find the solution to your problem. 

Common problems include: 

= Virus threats 

= Trouble restarting your computer 

= Lost or missing files 

= Possible disk damage 

If you purchased this product to address any of the 
problems listed above, read these sections first. 


Immediate installation of the product may not always 
provide the best solution to your problem. 
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What to do if a virus is found 


& 


If after reviewing the information in this chapter, you 
have not resolved your problem, see “Frequently asked 
questions” on page 41. 


Viruses can be found during a manual or scheduled scan 
or by Auto-Protect when you perform an action with an 
infected file. Threats and security risks can appear 
during an instant messenger session, when sending an 
email message, or during a manual or scheduled scan. 


If Norton AntiVirus finds a virus or a file containing a 
virus or a potential security risk on your computer, there 
are several possible resolutions to the problem: 


Fix infection | Removes the virus from the file or if the 
threat is a worm or Trojan horse, deletes 


the file. 
Quarantine | Makes the file inaccessible by any 
infection program other than a Symantec antivirus 
program. 


You cannot accidentally open the file and 
spread the virus, but you can still 
evaluate it for possible submission to 


Symantec. 
Delete Removes the virus from your computer by 
infection deleting the file that contains the virus, 


worm, or Trojan horse. Delete should be 
used only if the file cannot be repaired or 
quarantined. 


Manual Lists infections that Norton AntiVirus is 
Removal unable to automatically remove. 
However, the Manual Removal window 
lets you launch the Symantec Web site for 
a tool or instructions to remove these 
infections. 
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See “Use online The online Help contains more information about this 
Help" on page 13. feature. 


If Norton AntiVirus cannot repair a file 


One of the most common reasons that Norton AntiVirus 
cannot automatically repair an infected file is that you do 
not have the most up-to-date virus definitions. Before 
running LiveUpdate to update your virus definitions, 
ensure that QuickScan is turned on (it is turned on by 
default). After LiveUpdate updates your virus definitions, 
QuickScan automatically checks for infections that have 
processes running in memory or infections that are 
referenced by start-up files and folders. 


If that does not work, read the information in the report 
window to identify the types of files that cannot be 
repaired, and then depending on the file type, take one of 
the following actions: 


Infected files with .exe, Use the Repair Wizard to 
doc, .dot, or .xls file solve the problem. 

name extensions (any file | For more information, see 
can be infected) the online Help. See “Use 


online Help" on page 13. 


Hard disk master boot Replace using your 
record, boot record, or operating system disks. 
system files (such as 10.SYS 
or MSDOS.SYS) and floppy 
disk boot record and 
system files 
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Look up viruses on the Symantec Web 


site 


The Symantec Web site contains a complete list of all 

known viruses and related malicious code, along with 
descriptions. You must be connected to the Internet to 
look up viruses. 


To look up viruses 


1 On the left side of the main window, under Norton 
AntiVirus, click Reports. 

2 Inthe Reports pane, click View Online Virus 
Encyclopedia. 
The Symantec Web site opens in your Internet 
browser. 


3 Use the links on the Web page to access the virus 
information that you want to view. 
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If your computer won't start 


If you have a virus or threat on your computer, you need 
to start the computer from an uninfected disk to remove 
the virus. 


Restart from the CD and See "Scan for viruses using 
scan your computer's hard | the CD" on page 37. 
disk for viruses. 


Scan for viruses using the CD 


& 


You might need to change your computer’s BIOS Setup 
options to start from the CD-ROM drive. To do so, see the 
documentation that came with your computer. 


To start from the CD and scan for viruses 


1 
2 


Insert the CD into the CD-ROM drive. 

Restart your computer. 

Your computer displays the following information: 

«= 1 Boot from Hard Drive 

«= 2 Boot from CD-ROM 

Press 2 Boot from CD-ROM to restart from the CD. 
After the computer restarts, the Emergency program 
automatically begins to scan for and remove viruses. 


When Norton AntiVirus has finished scanning, 
remove the CD from your CD-ROM drive. 
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If your product won't install 


Y) 


You must be running Windows in order to install your 
Symantec product. 


If you try to install your product on a computer that has a 
virus and you choose not to run the Symantec Pre-Install 
Scanner, start over and run the Symantec Pre-Install 
Scanner as directed. 


If you cannot run the Norton AntiVirus Pre-Install 
Scanner, but you can connect to the Internet, go to 
http://security.symantec.com and run virus detection 
from the Symantec Security Check Web site. 


Once the virus has been repaired, delete the installation 
files that were left behind in the folder after you tried to 
install the first time. 


To delete remaining installation files 

1 On the Windows taskbar, click Start > Run. 
2 Inthe Run dialog box, type *TEMP% 

3 Click OK. 

4 Close the window. 

5 


After you delete the temporary files, begin installation 
again and run the Symantec Pre-Install Scanner to be 
sure that you have removed all of the viruses. 
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Create Emergency Disks 


Emergency Disks are used to start your computer in case 
of a problem. 


If your computer can start from a CD, you can use the 
product CD in place of Emergency Disks and do not need 
0 create them. 


If you downloaded the software, the program for creating 
Emergency Disks (NED.exe) is included in the download. 
Locate the downloaded software on your hard disk, and 
hen follow the instructions to create emergency disks, 
shown below. 


If you cannot start your computer from a CD, you can use 
hese instructions to create Emergency Disks on another 
computer or go to 
http://www.symantec.com/techsupp/ebd.html and 
download the Emergency Disk program. Follow the 
instructions included in the download to create the 
Emergency Disks. 


Alternatively, you can download the Emergency Disk 
program from 
http://www.symantec.com/techsupp/ebd.html 


Follow the instructions that are included in the download 
to create the Emergency Disks. 


You will need several formatted 1.44-MB disks. 


To create Emergency Disks 

1 Insert the CD into the CD-ROM drive. 
Click Browse CD. 

Double-click the Support folder. 
Double-click the Edisk folder. 
Double-click NED.exe. 

In the Welcome window, click OK. 


Nou FWRN 


Label the first disk as instructed, and then insert it 
into drive A. 


8 Click Yes. 
9 Repeat steps 7 and 8 for the subsequent disks. 
10 When the procedure is complete, click OK. 
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11 Remove the final disk from drive A. 


12 Test the first disk in the set to ensure that you can use 
it to restart your computer. 


13 Store the Emergency Disk set in a safe place. 


If you need to use Emergency Disks 


You can use Emergency Disks to restart your computer 
and scan for viruses or run DOS-based recovery utilities. 


To use Emergency Disks 


1 Insert Emergency Disk 1 into drive A, and then 
restart your computer. 
The Emergency program runs in DOS. 


2 Select the program that you want to run. 
For DOS program help, press the F1 key while you 
are running the program. 

3 Follow the on-screen instructions for inserting and 
removing the Emergency Disks. 

4 When the Emergency program is done, remove the 


Emergency Disk from drive A, and then restart your 
computer. 


Frequently asked 
questions 


The information in this chapter will help you solve the 
most frequently encountered problems. 


Explore the Symantec service and 
support Web site 


On the Symantec service and support Web site, you can 
find the latest protection and program updates, patches, 
online tutorials, Knowledge Base articles, and virus 
removal tools. 


To explore the Symantec service and support Web site 


1 
2 


On the Internet, go to www.symantec.com/techsupp 
Follow the links to the information that you want. 


How can | find the version number? 


You can check the version number of your product on 
your computer. 


To check the version number 


1 
2 
3 


Start your product. 

Click Help and Support. 

On the Help menu, click About <your product 
name>. 

If applicable, in the About dialog box, select your 
product name. 
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If you need to uninstall 


See “Use online Instructions for uninstalling are available in the online 
Help" on page 13. Help. 
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Troubleshoot virus and threat protection 


Check here for possible solutions to issues that might 
arise with Norton AntiVirus. 


How do | make Auto-Protect load when | start 
my computer? 


If the Norton AntiVirus Auto-Protect icon is not visible on 
the lower-right corner of the Windows taskbar, Auto- 
Protect is not loaded. Failure to load Auto-Protect may be 
due to one of the following situations: 


You may have started Windows in safe mode. Windows 
restarts in safe mode if the previous shutdown did not 
complete successfully. For example, you may have 
turned off the power without choosing Shut Down on the 
Windows Start menu. 


To restart Windows 

1 On the Windows taskbar, click Start > Shut Down. 
2 Inthe Shut Down Windows dialog box, click Restart. 
3 Click OK. 


Norton AntiVirus may not be configured to start Auto- 
Protect automatically. 


To set Auto-Protect to start automatically 

1 Inthe main window, click Options. 
If a menu appears, click Norton AntiVirus. 

2 Inthe Options window, under System, click Auto- 
Protect. 

3 Ensure that Start Auto-Protect when Windows starts 
up is checked. 


Norton AntiVirus may not be configured to show the 
Auto-Protect icon in the Windows system tray. 
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To show the Auto-Protect icon in the Windows system 

tray 

1 Inthe main window, click Options. 
If a menu appears, click Norton AntiVirus. 

2 In the Options window, under System, click Auto- 
Protect. 

3 Ensure that Show the Auto-Protect icon in the 
Windows system tray is checked. 


How do | stop a virus that continues to infect my 
files after | have scanned and removed the virus? 


A virus may continue to infect files for several reasons. 


The virus might be in a program file with an unusual 
extension for which Norton AntiVirus is not configured 
to search. 


To reset Norton AntiVirus scanning options 


1 In the main window, click Options. 
If a menu appears, click Norton AntiVirus. 


2 In the Options window, under System, click Manual 
Scan. 

3 Under Which file types to scan for viruses, click 
Comprehensive file scanning. 


4 Click Manual Scan > Bloodhound. 


5 Ensure that Enable Bloodhound heuristics is checked, 
and then click Highest level of protection. 


6 Click OK. 


7 Scan all of the disks that you use and repair all 
infected files. 


The source of the infection could be a floppy disk. Scan 
all of the floppy disks that you use to ensure that they are 
free of viruses. 


The virus might be remaining in memory after you 
remove it from the boot record. It then reinfects your boot 
record. If the problem is a Trojan horse or worm that was 
transmitted over a shared network drive, you must 
disconnect from the network or password protect the 
drive to let Norton AntiVirus delete the problem 


Frequently asked questions | 45 
Troubleshoot virus and threat protection | 


Why is Norton AntiVirus unable to repair my 
infected files? 


If Norton AntiVirus cannot repair your infected files, you 
may not have the most current virus protection on your 
computer. Update your virus definitions regularly to 
protect your computer from the latest viruses. 


If, after using LiveUpdate, the virus cannot be removed, 
the file may be corrupted, or contain a new virus. Do one 
of the following: 


= Quarantine the file and submit it to Symantec. 


= Replace the infected file with a clean copy, if one 
exists, and delete the infected file. 


Why am | unable to receive email messages? 


If you are using a firewall, it may block access to the 
Internet features of Norton AntiVirus and prevent receipt 
of Email messages. 


You can temporarily turn off email protection and 
attempt to download your email messages again. 


To temporarily turn off incoming email protection 


1 Inthe main window, click Options. 
If a menu appears, click Norton AntiVirus. 


In the Options window, under Internet, click Email. 
Uncheck Scan incoming Email. 

Click OK. 

Download your email messages. 


ou FW N 


Check Scan incoming Email to turn email protection 
back on. 


Your email client may have timed out. Make sure that 
timeout protection is turned on. 


If you continue to experience problems downloading 
email messages, turn off email protection. 


46 | Frequently asked questions 
Troubleshoot virus and threat protection 


To turn off email protection 


1 


2 
3 
4 
5 


In the main window, click Options. 
If a menu appears, click Norton AntiVirus. 


In the Options window, under Internet, click Email. 
Uncheck Scan incoming Email. 

Uncheck Scan outgoing Email. 

Click OK. 


Why am | unable to send email messages? 


If you get the message Norton AntiVirus was unable to 
send your email message because the connection to your 
email server was disconnected, your email client may be 
set to automatically disconnect after sending and 
receiving email messages. To resolve this issue, turn off 
this option within your email client. Consult your email 
client manual for instructions on how to do this. 


If you are using a firewall, it may block access to the 
Internet features of Norton AntiVirus. 


For Norton AntiVirus to scan outgoing email messages 
for viruses, it intercepts and scans the messages before 
they are sent to your email provider. To resolve this 
issue, turn off Norton AntiVirus outgoing email scanning. 


To turn off outgoing email scanning 


1 


In the main window, click Options. 
If a menu appears, click Norton AntiVirus. 


In the Options window, under Internet, click Email. 
Uncheck Scan outgoing Email. 
Click OK. 
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Troubleshoot LiveUpdate 


Check here for possible solutions to issues that might 
arise with LiveUpdate. 


What if | can't use LiveUpdate? 


When new updates become available, Symantec posts 
them on the Symantec Web site. If you can’t run 
LiveUpdate, you can obtain new updates from the 
Symantec Web site. 


To obtain updates from the Symantec Web site 
1 On the Internet, go to securityresponse.symantec.com 


2 Follow the links to obtain the type of update that you 
need. 


What if | run LiveUpdate on an internal network? 


If you run LiveUpdate on a computer that is connected to 
a network that is behind a company firewall, your 
network administrator might set up an internal 
LiveUpdate server on the network. LiveUpdate should 
find this location automatically. 


If you have trouble connecting to an internal LiveUpdate 
server, contact your network administrator. 


Why is Automatic LiveUpdate having problems 
connecting? 


Automatic LiveUpdate does not recognize proxy settings 
that are configured in the Internet Options Control Panel. 
To ensure that your proxy settings are used by Automatic 
LiveUpdate, you must configure them in the Symantec 
LiveUpdate Control Panel. 
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Service and support 
solutions 


The Service & Support Web site at 
http://service.symantec.com supports Symantec 
products. Customer Service helps with nontechnical 
issues such as orders, upgrades, replacements, and 
rebates. Technical Support helps with technical issues 
such as installing, configuring, or troubleshooting 
Symantec products. 


Methods of technical support and customer service can 
vary by region. For information on support offerings in 
your region, check the appropriate Web site listed in the 
sections that follow. 


If you received this product when you purchased your 
computer, your computer manufacturer may be 
responsible for providing your support. 


Customer service 


The Service & Support Web site at 
http://service.symantec.com tells you how to: 


= Subscribe to Symantec newsletters. 

= Locate resellers and consultants in your area. 

= Update your product registration. 

= Find out about orders, returns, or a rebate status. 

= Access Customer Service FAQs. 

= Post a question to a Customer Service representative. 
= Obtain product information, literature, or trialware. 


For upgrade orders, visit the Symantec Store at: 
http://www.symantecstore.com 
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Technical support 


Symantec offers two technical support options for help 
with installing, configuring, or troubleshooting Symantec 
products: 


= Online Service and Support 
Connect to the Symantec Service & Support Web site 
at http://service.symantec.com, select your user type, 
and then select your product and version. You can 
access hot topics, Knowledge Base articles, tutorials, 
contact options, and more. You can also post a 
question to an online Technical Support 
representative. 


PriorityCare telephone support 

This fee-based (in most areas) telephone support is 
available to all registered customers. Find the phone 
number for your product at the Service & Support 
Web site. You’ll be led through the online options 
first, and then to the telephone contact options. 


Support for old and discontinued versions 


When Symantec announces that a product will no longer 
be marketed or sold, telephone support is discontinued 
60 days later. Technical information may still be 
available through the Service & Support Web site at: 
http://service.symantec.com 


Subscription policy 


If your Symantec product includes virus, firewall, or Web 
content protection, you may be entitled to receive 
updates via LiveUpdate. Subscription length varies by 
Symantec product. 


After your initial subscription ends, you must renew it 
before you can update your virus, firewall, or Web 
content protection. Without these updates, you will be 
vulnerable to attacks. 
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When you run LiveUpdate near the end of your 
subscription period, you are prompted to subscribe for a 
nominal charge. Simply follow the instructions on the 
screen. 


Worldwide service and support 


Technical support and customer service solutions vary 
by country. For Symantec and International Partner 
locations outside of the United States, contact one of the 
service and support offices listed below, or connect to 
http://service.symantec.com and select your region 
under Global Service and Support. 
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Worldwide service and support 


Service and support offices 


North America 


Symantec Corporation 
555 International Way 
Springfield, OR 97477 
U.S.A. 


Australia and New Zealand 


Symantec Australia 
Level 2,1 Julius Avenue 
North Ryde, NSW 2113 
Sydney 

Australia 


Europe, Middle East, and Africa 


Symantec Authorized Service Center 
Postbus 1029 

3600 BA Maarssen 

The Netherlands 


Latin America 


Symantec Brasil 

Market Place Tower 

Av. Dr. Chucri Zaidan, 920 
12° andar 

Sao Paulo - SP 

CEP: 04583-904 

Brasil, SA 


July 20, 2004 


http://www.symantec.com/ 


http://www.symantec.com/region/reg_ap/ 
+61 (2) 8879-1000 
Fax: +61 (2) 8879-1001 


http://www.symantec.com/region/reg_eu/ 
+353 (1) 811 8032 


Portuguese: 
http://www.service.symantec.com/br 
Spanish: 
http://www.service.symantec.com/mx 
Brazil: +55 (11) 5189-6300 

Mexico: +52 55 5322 3681 (Mexico DF) 
01 800 711 8443 (Interior) 
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